{"id":"https://openalex.org/W7165381854","doi":"https://doi.org/10.1007/s10207-026-01275-5","title":"Risk management for cyber insurance: a survey for data-driven approaches with the use of AI","display_name":"Risk management for cyber insurance: a survey for data-driven approaches with the use of AI","publication_year":2026,"publication_date":"2026-06-20","ids":{"openalex":"https://openalex.org/W7165381854","doi":"https://doi.org/10.1007/s10207-026-01275-5"},"language":"en","primary_location":{"id":"doi:10.1007/s10207-026-01275-5","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s10207-026-01275-5","pdf_url":"https://link.springer.com/content/pdf/10.1007/s10207-026-01275-5.pdf","source":{"id":"https://openalex.org/S164062316","display_name":"International Journal of Information Security","issn_l":"1615-5262","issn":["1615-5262","1615-5270"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"International Journal of Information Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://link.springer.com/content/pdf/10.1007/s10207-026-01275-5.pdf","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5119437388","display_name":"Antonios Paragioudakis","orcid":null},"institutions":[{"id":"https://openalex.org/I165862685","display_name":"St George's, University of London","ror":"https://ror.org/040f08y74","country_code":"GB","type":"education","lineage":["https://openalex.org/I124357947","https://openalex.org/I165862685"]},{"id":"https://openalex.org/I2802089456","display_name":"Analytical Services","ror":"https://ror.org/04g2rbh88","country_code":"US","type":"nonprofit","lineage":["https://openalex.org/I2802089456"]},{"id":"https://openalex.org/I4401726869","display_name":"City St George's, University of London","ror":"https://ror.org/047ybhc09","country_code":"GB","type":"education","lineage":["https://openalex.org/I124357947","https://openalex.org/I4401726869"]}],"countries":["GB","US"],"is_corresponding":true,"raw_author_name":"Antonios Paragioudakis","raw_affiliation_strings":["City St George\u2019s, University of London, London, UK","Sphynx Analytics LTD, Nicosia, Cyprus"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"City St George\u2019s, University of London, London, UK","institution_ids":["https://openalex.org/I165862685","https://openalex.org/I4401726869"]},{"raw_affiliation_string":"Sphynx Analytics LTD, Nicosia, Cyprus","institution_ids":["https://openalex.org/I2802089456"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5007288843","display_name":"Nikos Komninos","orcid":"https://orcid.org/0000-0003-2776-1283"},"institutions":[{"id":"https://openalex.org/I165862685","display_name":"St George's, University of London","ror":"https://ror.org/040f08y74","country_code":"GB","type":"education","lineage":["https://openalex.org/I124357947","https://openalex.org/I165862685"]},{"id":"https://openalex.org/I4401726869","display_name":"City St George's, University of London","ror":"https://ror.org/047ybhc09","country_code":"GB","type":"education","lineage":["https://openalex.org/I124357947","https://openalex.org/I4401726869"]}],"countries":["GB"],"is_corresponding":true,"raw_author_name":"Nikos Komninos","raw_affiliation_strings":["City St George\u2019s, University of London, London, UK"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"City St George\u2019s, University of London, London, UK","institution_ids":["https://openalex.org/I165862685","https://openalex.org/I4401726869"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5015879995","display_name":"Michail Smyrlis","orcid":"https://orcid.org/0000-0001-9527-516X"},"institutions":[{"id":"https://openalex.org/I2802089456","display_name":"Analytical Services","ror":"https://ror.org/04g2rbh88","country_code":"US","type":"nonprofit","lineage":["https://openalex.org/I2802089456"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Michail Smyrlis","raw_affiliation_strings":["Sphynx Analytics LTD, Nicosia, Cyprus"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Sphynx Analytics LTD, Nicosia, Cyprus","institution_ids":["https://openalex.org/I2802089456"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5029587426","display_name":"Georgios Spanoudakis","orcid":null},"institutions":[],"countries":[],"is_corresponding":true,"raw_author_name":"Georgios Spanoudakis","raw_affiliation_strings":["Sphynx Technology Solutions AG, Zug, Switzerland"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Sphynx Technology Solutions AG, Zug, Switzerland","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5014449520","display_name":"Christos Kloukinas","orcid":"https://orcid.org/0000-0003-0424-7425"},"institutions":[{"id":"https://openalex.org/I165862685","display_name":"St George's, University of London","ror":"https://ror.org/040f08y74","country_code":"GB","type":"education","lineage":["https://openalex.org/I124357947","https://openalex.org/I165862685"]},{"id":"https://openalex.org/I4401726869","display_name":"City St George's, University of London","ror":"https://ror.org/047ybhc09","country_code":"GB","type":"education","lineage":["https://openalex.org/I124357947","https://openalex.org/I4401726869"]}],"countries":["GB"],"is_corresponding":true,"raw_author_name":"Christos Kloukinas","raw_affiliation_strings":["City St George\u2019s, University of London, London, UK"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"City St George\u2019s, University of London, London, UK","institution_ids":["https://openalex.org/I165862685","https://openalex.org/I4401726869"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":["https://openalex.org/A5007288843","https://openalex.org/A5014449520","https://openalex.org/A5015879995","https://openalex.org/A5029587426","https://openalex.org/A5119437388"],"corresponding_institution_ids":["https://openalex.org/I165862685","https://openalex.org/I2802089456","https://openalex.org/I4401726869"],"apc_list":{"value":3190,"currency":"USD","value_usd":3190},"apc_paid":{"value":3190,"currency":"USD","value_usd":3190},"fwci":0.0,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":{"value":0.79826333,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"25","issue":"4","first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.7166000008583069,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.7166000008583069,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11864","display_name":"Supply Chain Resilience and Risk Management","score":0.02539999969303608,"subfield":{"id":"https://openalex.org/subfields/1408","display_name":"Strategy and Management"},"field":{"id":"https://openalex.org/fields/14","display_name":"Business, Management and Accounting"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.02329999953508377,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/underwriting","display_name":"Underwriting","score":0.8310999870300293},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.6322000026702881},{"id":"https://openalex.org/keywords/risk-management","display_name":"Risk management","score":0.6295999884605408},{"id":"https://openalex.org/keywords/risk-management-framework","display_name":"Risk management framework","score":0.4327000081539154},{"id":"https://openalex.org/keywords/insurability","display_name":"Insurability","score":0.42480000853538513},{"id":"https://openalex.org/keywords/component","display_name":"Component (thermodynamics)","score":0.4244999885559082},{"id":"https://openalex.org/keywords/work","display_name":"Work (physics)","score":0.3982999920845032}],"concepts":[{"id":"https://openalex.org/C26503482","wikidata":"https://www.wikidata.org/wiki/Q1898080","display_name":"Underwriting","level":2,"score":0.8310999870300293},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.680899977684021},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.6322000026702881},{"id":"https://openalex.org/C32896092","wikidata":"https://www.wikidata.org/wiki/Q189447","display_name":"Risk management","level":2,"score":0.6295999884605408},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.6258000135421753},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.4618000090122223},{"id":"https://openalex.org/C164403151","wikidata":"https://www.wikidata.org/wiki/Q7336280","display_name":"Risk management framework","level":4,"score":0.4327000081539154},{"id":"https://openalex.org/C33364599","wikidata":"https://www.wikidata.org/wiki/Q6042300","display_name":"Insurability","level":5,"score":0.42480000853538513},{"id":"https://openalex.org/C168167062","wikidata":"https://www.wikidata.org/wiki/Q1117970","display_name":"Component (thermodynamics)","level":2,"score":0.4244999885559082},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4018000066280365},{"id":"https://openalex.org/C18762648","wikidata":"https://www.wikidata.org/wiki/Q42213","display_name":"Work (physics)","level":2,"score":0.3982999920845032},{"id":"https://openalex.org/C133462117","wikidata":"https://www.wikidata.org/wiki/Q4929239","display_name":"Data collection","level":2,"score":0.3824000060558319},{"id":"https://openalex.org/C12174686","wikidata":"https://www.wikidata.org/wiki/Q1058438","display_name":"Risk assessment","level":2,"score":0.3695000112056732},{"id":"https://openalex.org/C157763539","wikidata":"https://www.wikidata.org/wiki/Q6806621","display_name":"Medical underwriting","level":5,"score":0.31940001249313354},{"id":"https://openalex.org/C96250715","wikidata":"https://www.wikidata.org/wiki/Q965330","display_name":"Estimation","level":2,"score":0.30640000104904175},{"id":"https://openalex.org/C162118730","wikidata":"https://www.wikidata.org/wiki/Q1128453","display_name":"Actuarial science","level":1,"score":0.29260000586509705},{"id":"https://openalex.org/C165609540","wikidata":"https://www.wikidata.org/wiki/Q1172486","display_name":"Data breach","level":2,"score":0.2863999903202057},{"id":"https://openalex.org/C56739046","wikidata":"https://www.wikidata.org/wiki/Q192060","display_name":"Knowledge management","level":1,"score":0.27709999680519104},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.27480000257492065},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.2709999978542328},{"id":"https://openalex.org/C10511746","wikidata":"https://www.wikidata.org/wiki/Q899388","display_name":"Data security","level":3,"score":0.26420000195503235}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1007/s10207-026-01275-5","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s10207-026-01275-5","pdf_url":"https://link.springer.com/content/pdf/10.1007/s10207-026-01275-5.pdf","source":{"id":"https://openalex.org/S164062316","display_name":"International Journal of Information Security","issn_l":"1615-5262","issn":["1615-5262","1615-5270"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"International Journal of Information Security","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1007/s10207-026-01275-5","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s10207-026-01275-5","pdf_url":"https://link.springer.com/content/pdf/10.1007/s10207-026-01275-5.pdf","source":{"id":"https://openalex.org/S164062316","display_name":"International Journal of Information Security","issn_l":"1615-5262","issn":["1615-5262","1615-5270"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"International Journal of Information Security","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G2613634103","display_name":null,"funder_award_id":"101128013","funder_id":"https://openalex.org/F4320320300","funder_display_name":"European Commission"}],"funders":[{"id":"https://openalex.org/F4320320300","display_name":"European Commission","ror":"https://ror.org/00k4n6c32"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7165381854.pdf","grobid_xml":"https://content.openalex.org/works/W7165381854.grobid-xml"},"referenced_works_count":60,"referenced_works":["https://openalex.org/W92760516","https://openalex.org/W2602079301","https://openalex.org/W2767094836","https://openalex.org/W2968869838","https://openalex.org/W2981679275","https://openalex.org/W3015342250","https://openalex.org/W3042690941","https://openalex.org/W3049029288","https://openalex.org/W3107260973","https://openalex.org/W3133115639","https://openalex.org/W3171467315","https://openalex.org/W3180050267","https://openalex.org/W3181292541","https://openalex.org/W3208573928","https://openalex.org/W3212685837","https://openalex.org/W4213292645","https://openalex.org/W4214906203","https://openalex.org/W4226133645","https://openalex.org/W4226312301","https://openalex.org/W4297659142","https://openalex.org/W4309689565","https://openalex.org/W4316664258","https://openalex.org/W4317770587","https://openalex.org/W4320342929","https://openalex.org/W4322505540","https://openalex.org/W4366299825","https://openalex.org/W4377142609","https://openalex.org/W4384523884","https://openalex.org/W4385562826","https://openalex.org/W4385605314","https://openalex.org/W4385754940","https://openalex.org/W4386220991","https://openalex.org/W4386760000","https://openalex.org/W4391769816","https://openalex.org/W4392230261","https://openalex.org/W4396788135","https://openalex.org/W4396954697","https://openalex.org/W4398178583","https://openalex.org/W4400321616","https://openalex.org/W4402158164","https://openalex.org/W4403723873","https://openalex.org/W4404688251","https://openalex.org/W4406030898","https://openalex.org/W4406603560","https://openalex.org/W4408565441","https://openalex.org/W4408723580","https://openalex.org/W4408919612","https://openalex.org/W4410491967","https://openalex.org/W4410770994","https://openalex.org/W4412844373","https://openalex.org/W4413679296","https://openalex.org/W4413679920","https://openalex.org/W4414345534","https://openalex.org/W4414594130","https://openalex.org/W4415029341","https://openalex.org/W4415364197","https://openalex.org/W4417334604","https://openalex.org/W6893267679","https://openalex.org/W6911336664","https://openalex.org/W7129284689"],"related_works":[],"abstract_inverted_index":{"Abstract":[0],"The":[1],"cyber":[2,52,84,195],"threat":[3],"landscape":[4],"is":[5],"evolving":[6],"with":[7,118],"increasing":[8],"sophistication,":[9],"making":[10],"robust":[11],"risk":[12,60,92,105,197],"management":[13],"strategies":[14],"essential.":[15],"Cyber":[16],"insurance":[17,53,85,196],"has":[18,69],"emerged":[19],"as":[20,86,145],"a":[21,63,87,178],"key":[22,142],"mechanism":[23],"for":[24,47,83,160,187],"organizations":[25],"to":[26,194],"transfer":[27],"risk.":[28],"While":[29],"not":[30],"yet":[31],"mandatory,":[32],"recent":[33],"regulatory":[34],"trends":[35],"are":[36,114],"encouraging":[37],"the":[38,45,97,133],"adoption":[39],"of":[40,90,135,149,181],"multiple":[41],"technologies,":[42],"potentially":[43],"paving":[44],"way":[46],"broader":[48],"implementation.":[49],"However,":[50],"traditional":[51],"underwriting":[54,170],"still":[55],"relies":[56],"heavily":[57],"on":[58,99],"questionnaire-based":[59],"assessments,":[61],"lacking":[62],"truly":[64],"data-driven":[65,81,190],"approach.":[66],"This":[67],"gap":[68],"received":[70],"limited":[71],"attention":[72],"in":[73],"existing":[74,182],"research.":[75],"In":[76],"this":[77,175],"survey":[78,176],"we":[79],"examine":[80],"methodologies":[82],"critical":[88],"component":[89],"modern":[91],"management.":[93,198],"We":[94,140],"systematically":[95],"review":[96],"literature":[98],"data":[100,102,146,152],"sources,":[101],"collection":[103],"practices,":[104],"calculation":[106],"methods,":[107,121],"and":[108,116,128,138,154,157,171,184,191],"pricing":[109,172],"strategies.":[110],"Traditional":[111],"actuarial":[112],"approaches":[113,183,193],"analyzed":[115],"contrasted":[117],"emerging":[119],"AI-enabled":[120],"including":[122],"supervised":[123],"learning":[124],"models,":[125],"predictive":[126],"analytics,":[127],"simulation-based":[129],"techniques":[130],"that":[131],"enhance":[132],"estimation":[134],"incident":[136],"likelihood":[137],"severity.":[139],"identify":[141],"challenges,":[143],"such":[144],"quality,":[147],"lack":[148],"standardization,":[150],"constrained":[151],"sharing,":[153],"model":[155],"interpretability,":[156],"outline":[158],"opportunities":[159],"future":[161],"work":[162],"aimed":[163],"at":[164],"integrating":[165],"empirical,":[166],"automated":[167],"analyses":[168],"into":[169],"workflows.":[173],"Overall,":[174],"offers":[177],"structured":[179],"overview":[180],"highlights":[185],"directions":[186],"developing":[188],"more":[189],"AI-supported":[192]},"counts_by_year":[],"updated_date":"2026-07-23T08:03:31.855105","created_date":"2026-06-20T00:00:00"}